Bug: https://fedorahosted.org/389/ticket/47828Thanks
Fix: https://fedorahosted.org/389/attachment/ticket/47828/0002-Ticket-47828-DNA-scope-allow-to-exlude-some-subtrees.patch
Test: https://fedorahosted.org/389/attachment/ticket/47828/0001-Ticket-47828-test-case.patch